Privacy Policy
1. Who we are
BulkoPin is operated by OCYHEAN TECH, the trading name of Hüseyin Memiş, an individual sole trader. For any personal data we collect about you, Hüseyin Memiş (trading as OCYHEAN TECH) acts as the data controller. Contact: support@bulkopin.com.
2. Our approach
BulkoPin is privacy-first by design. The Chrome extension does not ask for your Pinterest username, password, session cookies, or device cookies. It does not request the cookies or identity Chrome permissions. Exports run in your own logged-in Pinterest tab and are limited to content you can already see in that session. Image, video and ZIP/PDF/CSV files are assembled on your machine and are never uploaded to BulkoPin.
3. Personal data we collect
| Category | Purpose | Legal basis |
|---|---|---|
| Email address (account) | Create and authenticate your BulkoPin account, send transactional messages (sign-in, billing, security) | Performance of contract |
| Subscription status and plan | Determine which features you have access to (Free, Lifetime); enforce plan limits | Performance of contract |
| Quota / usage events (board URL, pin count, format, timestamp) | Enforce plan limits, debug, prevent abuse | Legitimate interest |
| Product analytics (opt-in) | If you accept the analytics cookie banner, PostHog (EU-hosted) records anonymized product-usage events (pages viewed, features used) tied to a randomly-generated browser identifier, not your name or email. Off until you accept; you can withdraw at any time. See our Cookie Policy. | Consent |
| Site-performance metrics | Vercel Analytics and Speed Insights measure aggregate page-load performance and traffic counts. Both are cookieless and do not use any persistent identifier, so they run without requiring consent. | Legitimate interest |
| Opt-in error reports | If you enable "Send error reports", a redacted event name, app version and stack trace hash are uploaded. URLs, emails, JWTs and raw HTML are stripped client-side and rejected server-side. Off by default. | Consent |
| Server logs (IP address, request metadata) | Security, fraud prevention, rate limiting | Legitimate interest, legal obligation |
| Support correspondence | Respond to your inquiries | Legitimate interest |
| Billing data (handled by Paddle) | Payments are processed by Paddle, our Merchant of Record. BulkoPin does not see or store your payment card details. We only receive a customer ID, transaction metadata and subscription state. | Performance of contract |
We do not collect Pinterest credentials, do not read your Pinterest cookies or session tokens, do not run third-party advertising trackers, and do not sell or rent personal data.
Data we never collect:
- Your Pinterest cookies or raw Pinterest session data.
- The images, videos, or files you download — they go from Pinterest's CDN straight to your device and are never uploaded to us.
- Your local files or folder contents.
- Automatic content categorization, tagging, or classification of any kind — BulkoPin has no such feature, and none of your content is ever sent to a third-party classification service.
- IP addresses beyond what security and abuse-prevention require, and never for tracking or profiling.
4. Recipients and sharing
- Paddle.com Market Limited — Merchant of Record. Processes payment, handles billing, tax compliance, invoices, refunds, and disputes. Paddle's privacy notice: paddle.com/legal/privacy.
- Subprocessors — cloud hosting, Supabase, and configured infrastructure for backend infrastructure. Bound by data-processing agreements.
- Authorities — only where required by valid legal process.
We do not share personal data with any party for advertising or profiling.
5. International transfers
Our infrastructure providers may process data outside your country of residence (including within the EU/EEA and the United States). Transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or adequacy decisions where applicable.
6. Retention
- Account data — kept while your account exists; deleted within 30 days of account closure.
- Subscription / billing metadata — kept while the subscription is active and for 12 months after the last renewal for dispute and chargeback handling.
- Quota / usage events — kept for up to 90 days.
- Product-analytics events (PostHog, only if you accept the cookie banner) — retained per PostHog's standard retention, tied to an anonymized browser identifier, never your name or email.
- Opt-in error reports — kept for up to 30 days, then purged.
- Server / rate-limit logs — kept for up to 30 days.
- Support correspondence — kept for up to 24 months.
- Billing records — kept by Paddle for the period required by tax law (typically 7–10 years).
To request account deletion or a copy of your personal data, email support@bulkopin.com from the address on your account.
7. Your rights
Depending on your country you have the right to access, rectify, delete, restrict, port, or object to processing of your personal data, to withdraw consent, and to lodge a complaint with your data-protection authority. To exercise these rights, email support@bulkopin.com. We respond within one month.
8. Security
We apply appropriate technical and organisational measures including TLS in transit, encryption at rest, access controls, audit logging, and row-level database security.
9. How the extension works
The Chrome extension runs in your own Pinterest tab using your existing logged-in session. When you start an export, it reads pin URLs from the page you are viewing, downloads the images and videos directly from Pinterest's CDN, and packages them into a ZIP, PDF or CSV file on your machine. The image and video bytes are never uploaded to BulkoPin servers. Exports are always user-initiated — there is no background or continuous automation.
10. Permissions
The extension requests only the Chrome permissions it actually needs. Notably, it does not request cookies or identity.
- activeTab, scripting — read pins from the Pinterest tab you're viewing, only after you click the toolbar icon.
- downloads — save the resulting ZIP, PDF or CSV to your Downloads folder.
- storage, unlimitedStorage — remember your export preferences and cache thumbnails locally so retries don't re-download.
- tabs, alarms, notifications — detect when a Pinterest tab finishes loading, keep the service worker alive during long exports, and notify you when a job completes.
- host permissions for
*.pinterest.comand*.pinimg.com— fetch pin pages and image/video files. - host permissions for
bulkopin.comand the Supabase auth endpoint — check your subscription, log quota usage, and authenticate your BulkoPin account.
11. Cookies
See our Cookie Policy for the full list. In short: we set strictly necessary cookies for authentication and theme preference, and — only if you accept the cookie banner — PostHog stores an anonymized analytics identifier in your browser's local storage (not a cookie). No advertising cookies, ever.
12. Children
BulkoPin is not directed at children under 13 and we do not knowingly collect data from minors.
13. Changes
Material changes to this policy will be reflected by a new "Last updated" date and, where appropriate, by direct notice to account holders.
14. Language
This policy is written in English. Translations into other languages are provided for convenience only; if a translation and the English version conflict, the English version is authoritative and prevails.